Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
File:                     FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft (raw, json)
Hash identifier:          JVtJfMkpF9W8etcS2aSA4ZVbq+g91RtIH51nijXoSvs=
Subject key identifier:   0B:CD:38:D6:E1:8B:E0:92:D4:3F:93:7B:AC:B2:58:16:E5:1D:30:56
Authority key identifier: FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8
Certificate issuer:       /CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
Certificate serial:       37918B54AAF42D0B5B3F04D46C562014551AE8A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
Manifest number:          01D9
Signing time:             Wed 06 Aug 2025 07:22:12 +0000
Manifest this update:     Wed 06 Aug 2025 07:17:12 +0000
Manifest next update:     Thu 07 Aug 2025 07:55:12 +0000
Files and hashes:         1: FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl (hash: mxlUO6mdNJ8WK28z5JvvjjuvfJFNiV3gUz5JUxMojYA=)
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:91:8b:54:aa:f4:2d:0b:5b:3f:04:d4:6c:56:20:14:55:1a:e8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff4f0b358cbd6c54eccbebf26f6d1a05f1d537e8
        Validity
            Not Before: Aug  6 07:17:12 2025 GMT
            Not After : Aug  7 07:55:12 2025 GMT
        Subject: CN=0BCD38D6E18BE092D43F937BACB25816E51D3056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:79:a6:c2:a6:4e:8e:0b:be:23:db:4d:8f:
                    1b:aa:bf:68:a6:19:9d:41:67:0a:77:66:2d:f6:c3:
                    a9:ee:f0:c7:0c:40:6d:5f:a5:7e:08:a8:b0:03:7f:
                    46:ac:da:fa:e4:6d:9f:66:ad:e6:70:ec:75:7f:eb:
                    d1:da:42:94:6d:4b:ba:f0:9c:8f:df:79:8b:d8:15:
                    57:3b:4b:86:78:b0:24:8a:9b:b5:36:c1:59:5e:79:
                    a3:fb:8f:80:bc:d0:cb:4d:74:79:ac:1f:0e:5d:4e:
                    4c:4b:51:a2:f7:8d:84:71:4a:5d:36:0f:b3:1c:2c:
                    b8:b4:a0:26:ed:c2:64:b0:ca:32:43:d6:7a:2d:a4:
                    d2:5b:50:5a:91:a0:92:05:84:2e:55:63:6a:12:3d:
                    1d:20:55:19:6d:6a:e1:9b:de:4b:b6:5a:fe:04:e5:
                    de:22:57:ba:c9:93:89:5d:9c:e4:4c:5a:46:2c:3a:
                    39:d6:39:f5:c4:d8:b9:1d:9a:23:12:dd:18:ca:70:
                    8a:18:cc:30:b4:14:f3:e9:6c:e0:65:2b:16:8c:a5:
                    8e:37:d5:9b:df:4d:1b:da:13:62:da:73:f6:a1:d1:
                    95:fa:44:29:a2:8e:48:67:c6:07:7c:e9:64:eb:f0:
                    11:ae:7c:c2:18:73:ec:40:1a:73:9f:1b:bf:8f:10:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CD:38:D6:E1:8B:E0:92:D4:3F:93:7B:AC:B2:58:16:E5:1D:30:56
            X509v3 Authority Key Identifier:
                keyid:FF:4F:0B:35:8C:BD:6C:54:EC:CB:EB:F2:6F:6D:1A:05:F1:D5:37:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08LNYy9bFTsy-vyb20aBfHVN-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9566443b-dff4-4d13-bb81-72c8630d6df6/0/FF4F0B358CBD6C54ECCBEBF26F6D1A05F1D537E8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:51:c4:89:02:af:d5:81:f8:5f:d3:37:67:84:a7:91:b1:77:
         64:d0:66:ce:e3:87:8d:4e:8c:07:f2:24:fa:c6:7e:b7:15:b9:
         a5:2b:2f:ac:e6:56:eb:35:7a:70:11:be:b1:be:c9:67:eb:6b:
         00:bf:5e:71:70:5c:fc:78:c8:d3:e1:f5:2e:49:2c:62:41:76:
         e4:0f:02:c7:5d:49:30:3d:50:07:90:83:f3:38:ed:cb:a3:cb:
         0b:c7:49:0a:26:67:74:f4:08:ba:e8:ce:f3:f0:d5:ae:e4:bc:
         ce:8c:8e:8b:e8:cf:97:f1:30:6b:b6:f6:4d:fa:2c:12:62:01:
         d4:7b:fb:32:6f:66:7c:9c:c7:b1:c2:24:1f:1a:98:3a:df:de:
         dd:93:a7:26:7e:89:b7:25:3d:d0:ed:38:40:0e:22:83:4c:4e:
         f9:77:5a:ab:47:4c:b8:32:fc:57:8e:42:d2:5b:d8:69:33:96:
         1d:ec:e2:b5:87:de:ad:b4:d6:6c:ee:2a:da:c2:10:64:e9:e7:
         e8:2d:be:eb:f9:be:50:32:45:3b:8f:cb:aa:b7:c1:54:35:03:
         0d:1f:e1:e8:03:42:ef:98:fd:6e:ab:44:65:c4:c4:96:46:bc:
         3d:04:c3:fe:8c:47:f9:b4:72:8d:c1:d1:95:98:8c:5f:a6:6f:
         03:a8:87:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:32:18 2025 by rpki-client